This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: hcpUz8B5UlTU252nINqOoOWuLHu/1WKvX744GLaFK24= Subject key identifier: 0C:56:2C:8C:09:AF:22:14:E5:A2:3C:CE:64:FC:C0:DC:21:2C:AE:4A Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 382E7D017D0C23A80D6EDD92310D06BB3F6AD724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 01D9 Signing time: Sat 20 Dec 2025 09:32:59 +0000 Manifest this update: Sat 20 Dec 2025 09:27:59 +0000 Manifest next update: Tue 23 Dec 2025 09:50:59 +0000 Files and hashes: 1: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: ah6jjuDsScnETUKRuJMdbV7gAyHOG7vH/cUJcAPOG7U=) 2: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: JXrlZwkzU+t2OW80BnzRg09yyBOlBRXE94ra04jRLWc=) 3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: 3Q3TcBWsaHvYgXVIh3Shkct0iPnHLeLaz/yA3bkjR18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2e:7d:01:7d:0c:23:a8:0d:6e:dd:92:31:0d:06:bb:3f:6a:d7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Dec 20 09:27:59 2025 GMT Not After : Dec 23 09:50:59 2025 GMT Subject: CN=0C562C8C09AF2214E5A23CCE64FCC0DC212CAE4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:11:cf:0e:20:4f:f7:7a:b5:a0:84:76:5b: 45:0a:33:a8:cd:81:70:a3:45:67:22:68:6d:42:40: bb:e1:80:d1:00:3b:a9:c9:fe:17:d2:e2:4f:9e:e7: dc:9f:5f:8f:fb:bb:19:4d:77:56:cb:43:97:87:3b: 58:3f:d2:3e:a5:0d:db:14:e3:50:45:2f:db:22:18: 0d:91:01:f0:bb:c8:85:8c:4d:7d:b5:2f:a5:a5:38: 67:6f:c8:f8:18:c8:d6:fc:0e:66:cc:a9:f1:b3:03: 55:65:98:cd:2e:de:85:0d:9e:2e:f8:72:d9:e5:57: db:a6:0e:b9:6d:fc:85:9a:c3:2e:aa:d8:0b:9e:a6: 66:29:0b:57:7e:4a:14:0c:99:c1:e0:2e:26:c3:17: 94:e7:93:e3:8d:26:05:b2:f4:55:3e:6c:45:d5:e1: c5:77:a9:f2:21:6b:da:70:1a:f4:c5:1d:fb:ad:6a: 7c:4d:ab:7d:26:98:c5:66:5d:ca:b5:b2:29:d2:02: f2:1e:c1:96:98:bf:4a:7b:6f:ec:a4:71:d1:90:f8: aa:bf:ed:76:a6:a7:99:a4:37:62:c6:3c:04:19:af: be:3e:fa:e8:bd:d0:a4:55:4a:c3:dc:60:4e:de:60: 38:bc:90:1b:17:cb:bd:22:09:9d:ad:84:16:8f:13: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:2C:8C:09:AF:22:14:E5:A2:3C:CE:64:FC:C0:DC:21:2C:AE:4A X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:84:d1:c3:83:fc:39:28:2c:8e:9b:a5:3b:b9:a9:7f:16:98: 94:78:af:56:33:63:e9:40:f1:dc:d6:1f:40:84:a3:99:4f:d0: 40:dc:a5:b3:60:67:31:ad:77:06:78:76:46:ba:bc:2b:e4:43: 62:7e:de:91:5c:08:10:79:90:75:4f:30:73:03:75:ef:8c:57: 58:ff:14:60:ad:d6:40:3d:11:19:d7:80:dd:4d:96:d9:07:68: 2d:2f:e0:46:4c:11:19:48:b7:af:04:7b:8b:b1:4e:53:a1:cb: 08:5a:49:b5:97:ee:e0:42:82:e6:4d:ac:30:08:2b:7f:3f:f1: a9:bf:73:f3:b3:1f:49:2c:18:a0:7f:f9:58:3d:42:8d:91:ad: 4d:bf:8d:ae:b0:e3:d6:0e:80:5a:06:fd:54:e8:2f:5e:2b:38: 62:db:d2:04:47:32:2a:88:a9:17:6b:fc:ce:16:78:d2:bb:74: 23:d1:7a:93:0f:ea:ad:42:f2:ed:62:42:f1:5a:3a:61:1f:ee: 60:fd:9b:0f:2f:1d:a5:b3:4e:93:2d:6f:ca:77:4c:d3:b9:6b: 70:3a:f6:98:b5:d5:35:0c:49:2d:d8:02:76:b3:18:ff:0c:dc: 56:d2:0f:fd:bf:c1:01:24:dc:3d:c4:d7:9e:83:90:a5:03:39: bd:8a:01:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOC59AX0MI6gNbt2SMQ0Guz9q1yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNTEyMjAwOTI3NTlaFw0yNTEyMjMwOTUwNTlaMDMxMTAvBgNV BAMTKDBDNTYyQzhDMDlBRjIyMTRFNUEyM0NDRTY0RkNDMERDMjEyQ0FFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjBHPDiBP93q1oIR2W0UKM6jN gXCjRWciaG1CQLvhgNEAO6nJ/hfS4k+e59yfX4/7uxlNd1bLQ5eHO1g/0j6lDdsU 41BFL9siGA2RAfC7yIWMTX21L6WlOGdvyPgYyNb8DmbMqfGzA1VlmM0u3oUNni74 ctnlV9umDrlt/IWawy6q2AuepmYpC1d+ShQMmcHgLibDF5Tnk+ONJgWy9FU+bEXV 4cV3qfIha9pwGvTFHfutanxNq30mmMVmXcq1sinSAvIewZaYv0p7b+ykcdGQ+Kq/ 7Xamp5mkN2LGPAQZr74++ui90KRVSsPcYE7eYDi8kBsXy70iCZ2thBaPE+CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDFYsjAmvIhTlojzOZPzA3CEsrkowHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqE0cOD/DkoLI6bpTu5qX8WmJR4r1YzY+lA 8dzWH0CEo5lP0EDcpbNgZzGtdwZ4dka6vCvkQ2J+3pFcCBB5kHVPMHMDde+MV1j/ FGCt1kA9ERnXgN1NltkHaC0v4EZMERlIt68Ee4uxTlOhywhaSbWX7uBCguZNrDAI K38/8am/c/OzH0ksGKB/+Vg9Qo2RrU2/ja6w49YOgFoG/VToL14rOGLb0gRHMiqI qRdr/M4WeNK7dCPRepMP6q1C8u1iQvFaOmEf7mD9mw8vHaWzTpMtb8p3TNO5a3A6 9pi11TUMSS3YAnazGP8M3FbSD/2/wQEk3D3E156DkKUDOb2KAXg= -----END CERTIFICATE-----Generated at Sun Dec 21 21:11:41 2025 by rpki-client